Palo Alto Networks is in talks to acquire Clutch Security, an Israeli startup that tracks the credentials AI agents use, for about $500 million, according to a report from The Information. Ctech, the English-language tech site of the Israeli business paper Calcalist, and the Israeli business site Globes both summarized the report on Nov 5, 2026. The talks are still under way and may not produce a deal. No deal has been announced.
The Information's article is paywalled, so the details below come from Ctech's summary, Globes, Pivot News and Clutch's own website. Each claim is attributed to the source that states it.
What was reported
Ctech writes that, according to The Information and people familiar with the negotiations, Palo Alto Networks is discussing a purchase of Clutch for approximately $500 million. Ctech adds that the deal would be Palo Alto's fifth announced acquisition this year, as CEO Nikesh Arora steps up efforts to expand the company's defenses against emerging AI-related threats.
Palo Alto Networks told The Information that it does not comment on "rumors or speculation." Ctech says Clutch did not immediately respond to a request for comment, and Globes says Clutch declined to comment. Pivot News notes that the account rests on unnamed people rather than a statement from either company, and that the available reporting does not set out deal terms, a timeline, or whether an agreement has been reached.
What Clutch makes
Ctech describes Clutch as a three-year-old company, founded in late 2023 by CEO Ofir Har-Chen, CTO Sagi Haas and VP of R&D Tal Kimhi. It operates in Israel and the United States. Its software helps organizations track and secure the passwords, authentication codes and other credentials that AI agents use to access corporate systems.
Ctech says the company focuses on non-human identities. It defines these as the digital credentials and permissions that let software systems, applications and automated tools communicate with one another, including API keys, service accounts, tokens and passwords. According to Ctech, Clutch's platform maps non-human identities across an environment, identifies excessive or exposed permissions, manages credentials through their lifecycle and detects suspicious activity. Ctech adds that the company is extending these capabilities to cover AI agents.
Clutch's own site describes the product as "The Identity Security Platform for the AI Era." It says the platform connects every entity to its origin, the people behind it, where it is stored, what consumes it and the resources it reaches, and that it offers more than 100 integrations that are API-based and agentless. It also says that no credentials are ever stored or transmitted. Those are Clutch's marketing claims, and this article has not tested them.
The money
Ctech says Clutch has raised about $28.5 million across two disclosed rounds: an $8.5 million seed round in July 2024 led by Lightspeed Venture Partners, and a $20 million Series A in January 2025 led by SignalFire, with Lightspeed and Merlin Ventures also taking part. Globes puts the total at more than $20 million.
Ctech notes that a $500 million price would be a substantial exit for Clutch and its investors compared with the money raised. It also says Clutch's current valuation was not known, per The Information.
Palo Alto's identity push
Ctech and Globes both link the talks to Palo Alto's earlier identity deal. Ctech reports that earlier this year Palo Alto completed its $25 billion acquisition of CyberArk, the Israeli-founded identity security company. Ctech says CyberArk has historically focused on managing human users' access to corporate systems, while Clutch targets the credentials and permissions used by AI agents. Globes says that integrating Clutch's technology could strengthen Palo Alto's position in identity security.
Other agent identity deals
Globes lists three recent deals of the same kind. According to Globes, the enterprise software company Workday acquired C1.ai last month, a company that specializes in managing the identities of AI agents alongside those of human employees. It says Okta acquired Permiso Security in August, and that Okta's competitor SailPoint acquired Entro Security in June. Globes says both of those deals were aimed at strengthening the buyers' ability to manage and secure the identities used by AI agents.
Globes explains the demand this way: unlike chatbots, which mostly answer questions, autonomous agents can take actions inside enterprise systems, so companies need ways to identify these agents, monitor their activity and restrict their access to information.
The security of agent access has come up on this site before. Earlier posts covered Cognition's plan to acquire Corridor for Devin security, a WIRED report on a contractor's Claude agent that may have leaked Defense Department logins and Meta's purchase of the coding-agent startup Conductor.
What to watch
Three things are still open. Neither company has confirmed the talks. The final price and terms are unknown, and Ctech says the talks may not result in a deal. Until an agreement is announced, the figures here come from a report by The Information, relayed by Ctech, Globes and Pivot News.
Sources
- Ctech (Calcalist): Palo Alto Networks in talks to acquire Israeli startup Clutch Security for $500 million
- Globes: Palo Alto Networks in talks to buy Clutch Security for $500m
- Pivot News: Palo Alto Networks in talks on $500M Clutch Security deal
- The Information: Palo Alto Networks in Talks to Pay $500 Million for AI Security Startup (paywalled)
- Clutch Security website
